1. Introduction and Controller
We appreciate your interest in our website. The protection of your personal data is extremely important to us. This Privacy & Cookie Policy explains how we process personal data when you visit our website, use our services, or interact with our marketing tools.
Controller according to Art. 4(7) GDPR:
Salude GbR
Berlinerstraße 54
55268 Nieder-Olm
Germany
Phone: +49 1577 1432292
Email: info@ecowiseagency.com
The controller is the legal entity that determines the purpose and means of processing personal data.
2. Hosting (Squarespace)
Our website is hosted by Squarespace (Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA). All data processed through this website may be stored on Squarespace servers located in the United States.
Squarespace is certified under the EU–US Data Privacy Framework, ensuring an adequate level of data protection under Art. 45 GDPR.
We have concluded a Data Processing Agreement (DPA) with Squarespace according to Art. 28 GDPR.
3. Consent Management (Usercentrics)
We use the Usercentrics Consent Management Platform (CMP) to obtain and record valid consent for cookies, tracking technologies, and external services. When visiting our website, you are shown a consent banner where you can grant or deny consent for specific categories.
Legal basis:
Art. 6(1)(a) GDPR (consent) for all non-essential cookies and marketing tools
Art. 6(1)(c) GDPR (legal obligation) for documentation of consent
Art. 7 GDPR (proof of consent)
Usercentrics stores consent decisions in a cookie with a retention period of 12 months.
4. Cookies and Tracking Technologies
We use cookies and comparable technologies to make the website functional, analyze usage patterns, and provide personalized advertising.
Cookies are categorized as follows:
Category | Legal Basis | Requires Consent |
|---|---|---|
Essential / Necessary | Art. 6(1)(f) GDPR (legitimate interest) | No |
Functional | Art. 6(1)(a) GDPR | Yes |
Analytics / Statistics | Art. 6(1)(a) GDPR | Yes |
Marketing / Advertising | Art. 6(1)(a) GDPR | Yes |
Marketing and analytics tools are only activated after you grant consent via the Usercentrics banner.
You may withdraw consent at any time via the “Cookie Settings” link in the footer.
5. Google Tag Manager
We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage scripts and tracking tags on our website.
Google Tag Manager does not process personal data itself, but it triggers other services (e.g. GA4, Google Ads). Those services are only loaded after consent is given.
Legal basis: Art. 6(1)(a) GDPR (consent)
Data transfers to the USA are based on the EU-US Data Privacy Framework.
6. Google Analytics 4 (GA4)
We use Google Analytics 4 for website analytics. The service collects, among other things, cookie identifiers, IP address (anonymized), device information, time stamps, and interaction events.
IP anonymization is active (“IP masking”)
Data retention: 2–14 months depending on settings
Legal basis: Art. 6(1)(a) GDPR (consent)
Service provider:
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
7. Google Ads Conversion Tracking
We use Google Ads Conversion Tracking to measure the performance of advertising campaigns. Cookies and tracking pixels are only activated after explicit consent.
Legal basis: Art. 6(1)(a) GDPR (consent)
Personal data may be transferred to the USA under the EU–US Data Privacy Framework.
8. Meta Pixel (Facebook Pixel)
We use the Meta Pixel (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) to measure conversions and build advertising audiences on Facebook and Instagram.
Data categories:
• Page views, events, browser type, device type, anonymized IP, ad interactions
Legal basis: Art. 6(1)(a) GDPR (consent)
Meta may transfer data to the USA under the EU–US Data Privacy Framework.
You can revoke consent at any time via the cookie banner or opt-out directly at:
https://www.facebook.com/settings?tab=ads
9. HubSpot
We use HubSpot for contact forms, CRM, and email marketing. When you submit a form (e.g., contact request, newsletter registration), the following data may be collected:
Name
Email address
Phone number (optional)
Message content
Timestamp, IP address, technical metadata
Legal basis:
Art. 6(1)(b) GDPR (performance of contract)
Art. 6(1)(a) GDPR (newsletter opt-in)
Art. 6(1)(f) GDPR (legitimate interest in CRM)
Data is stored on HubSpot servers in the EU and/or USA. HubSpot is certified under the EU–US Data Privacy Framework.
You may unsubscribe from emails at any time via a link included in every message.
10. Calendly (Appointment Scheduling)
We use Calendly (Calendly LLC, Atlanta, USA) to offer online appointment booking. When scheduling an appointment, Calendly processes:
Name
Email address
Date and time of appointment
Optional notes
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)
Calendly is certified under the EU–US Data Privacy Framework.
11. Legal Basis for Processing
We process personal data only in accordance with the following legal bases:
Purpose | Legal Basis |
|---|---|
Website operation, security | Art. 6(1)(f) GDPR |
Contract initiation / fulfilment | Art. 6(1)(b) GDPR |
Consent-based marketing & tracking | Art. 6(1)(a) GDPR |
Legal requirements (e.g. bookkeeping) | Art. 6(1)(c) GDPR |
12. Data Retention
We store personal data only as long as necessary for the stated purpose or as required by law.
Server log files are deleted after 30 days.
HubSpot form data is deleted upon request or when no longer required.
13. Data Transfers Outside the EU
Where data is transferred to the United States, this is based on:
EU–US Data Privacy Framework (if certified)
Standard Contractual Clauses (Art. 46 GDPR) where required
14. Your Rights (Art. 15–21 GDPR)
You have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to object (Art. 21 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent (Art. 7 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, contact us via email: info@ecowiseagency.com
15. Security
We use technical and organizational security measures (TLS encryption, access restriction, role-based authorization, server-side security monitoring) to protect data against loss, destruction, or unauthorized access.
16. Updates to This Policy
We may update this Privacy & Cookie Policy to reflect legal requirements or changes to our services. The latest version is always available on this page.
17. Contact
For data protection inquiries:
Salude GbR
Berlinerstraße 54
55268 Nieder-Olm
Germany
Email: info@ecowiseagency.com
Phone: +49 1577 1432292